PT-2022-34604 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a use-after-free warning in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34652 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.144 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34674 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: The issue is related to a use-after-free UAF error when detecting digest errors in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.18 through 5.19.8 Description: The issue concerns absolute zero lowcore corruption on boot. It was introduced in version v3.18 and fixed in version v5.19.9. The actual impact and attack plausibility have not yet been...

PT-2022-34600 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a potential security problem in the Linux Kernel, where it is assumed that a certain packet skb remains available after being added to a queue for a child process. Th...

PT-2022-34706 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to the drm/radeon component in the Linux Kernel. It involves adding a force flush to delay work when radeon is used. The actual impact and attack plausibility have not...

Lack of check for contract existance can cause loss of funds during transfers

Lines of code Vulnerability details Impact The current transfers will not check if the to address is for an existing token contract. This can cause loss of funds if an user attempts to make a swap for a tokens added to a pool and destructed later. Proof of Concept TokenA gets added to a pool The...

Initial price for the pool can be set by anyone

Lines of code Vulnerability details Impact The initial price for the pool can be initiated by anyone because there is no modifier existed to block anyone from calling initialize function. Proof of Concept function initializeuint160 initialPrice external override requireglobalState.price == 0, 'AI...

PT-2022-37427 · Unknown · Parity-Wasm

Name of the Vulnerable Software and Affected Versions: parity-wasm affected versions not specified Description: The parity-wasm software has been explicitly deprecated. The author recommends switching to wasm-tools. Recommendations: At the moment, there is no information about a newer version tha...

PT-2022-10580 · WordPress · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro plugin versions = 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited in the Booking Ultra Pro plugin at WordPress...

PT-2022-25621 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 0.12.1 Description: A vulnerability in the LIEF::MachO::SegmentCommand::virtual address function allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. Recommendations: For LIEF...

PT-2022-14219 · Applock · Applock

Name of the Vulnerable Software and Affected Versions: AppLock version 7.9.29 Description: The issue allows an attacker with physical access to the device to bypass biometric authentication due to incorrect implementation of fingerprint validations. Recommendations: For AppLock version 7.9.29,...

PT-2022-10571 · WordPress · Social Media Follow Buttons Bar

Name of the Vulnerable Software and Affected Versions: Social Media Follow Buttons Bar plugin versions prior to 4.74 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by an admin or higher-privileged user. The...

PT-2022-10579 · WordPress · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro plugin versions 1.1.4 and earlier Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to...

PT-2022-26085 · Amazon · Amazon Redshift Jdbc Driver

Name of the Vulnerable Software and Affected Versions: Amazon AWS Redshift JDBC Driver versions prior to 2.1.0.8 Description: The Object Factory in the Amazon AWS Redshift JDBC Driver does not check the class type when instantiating an object from a class name. This issue can lead to a potential...

PT-2022-8207 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

PT-2022-21794 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a3 Description: The issue is related to the allocation of resources without limits or throttling, allowing users to insert an email longer than 255 characters. If a user signs up with an excessively long email...

PT-2022-37323 · Skia · Skia

Name of the Vulnerable Software and Affected Versions: Skia affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the SkPathStroker::CheckCubicLinear function, which is called by SkPathStroker::cubicTo and...

PT-2022-25609 · Sourcecodester · Sourcecodester Best Student Result Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Student Result Management System version 1.0 Description: The issue allows for SQL Injection, which can be exploited by attackers. Recommendations: For version 1.0, update to a newer version that contains a fix for this...